Allow rule seems to get ignored on the first try

Installing and Using OpenWrt
21

Not sure, 00:a0:98:1d:e7:e5 is indeed my calling 192.168.3.15 device though. Same thing with 00:a0:98:12:46:a1 which is another Ubuntu VM testing environment (192.168.3.5).

I'll try using just a laptop connected to port 1 (VLAN) and see if that makes a difference.

I have restarted multiple times, and have also reset the router.

22

Powering off, restarting, or reflashing may not be enough to flush the switch cache.
Make sure to unplug the power cord from the router for a few seconds.
If the issue persists, it may be caused by a specific built-in switch implementation.

23

Since you mentioned VMs, are you certain that there is no network loop with the host machine connected on both networks?
Can you try to connect 2 simple computers and run the tests again?

1 Like
24

R7800 i not DSA yet.
Is the interface definition of 'exposed' correct? In my config i defined multiple bridges then added the bridge to the interface instead of the eth 1.3. That seems to work for me

1 Like
25

I tested it with a laptop, and it behaves like it should, so it must be something with my TrueNAS configuration.

It has a NIC with two ports and an interface for each, and I was using one port (igb0) for normal LAN access, and the other (igb1) for VLAN access, which I assigned to some VMs to isolate them from the LAN.

Would this cause a network loop? I'm not very experienced with networking haha. Certainly seems likely though.
Now I'm trying to set it up with VLAN tagging, as TrueNAS allows you to setup VLAN interfaces with IDs etc., though I've had no luck thus far.

26

Both ICMP echo request and reply arrive on the router as tagged VLAN 1:

This looks like 192.168.1.21 and 192.168.3.15 are currently in the same VLAN 1.
Perhaps you are using the wrong virtual networking method.

1 Like
27

That is normal for ipq806x, two CPU ports to the same switch, one exclusively for WAN, one exclusively for the LAN ports, to achieve full 1000 MBit/s full-duplex (in their proprietary NSS firmware) in- and out. All ports (including the CPU ports) are freely configurable as desired, the above is just the default config.

DSA support is ready, but unmerged so far:

2 Likes